Recent vulnerabilities and exploits

NA

Re: CVE-2021-4204: Linux Kernel eBPF Improper Input Validation Vulnerability...

NA

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash....

NA

There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash....

NA

An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An...

NA

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection....

6.4

CVSSv2

Affected versions of this package are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload....

5.8

CVSSv2

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20....

Lodash Lodash Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Liquidity Management 14.2.0 Oracle Banking Liquidity Management 14.3.0 Oracle Banking Liquidity Management 14.5.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.3.0 Oracle Banking Supply Chain Finance 14.5.0 Oracle Banking Trade Finance Process Management 14.2.0 Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Virtual Account Management 14.2.0 Oracle Banking Virtual Account Management 14.3.0 Oracle Banking Virtual Account Management 14.5.0 Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Cloud Native Core Policy 1.11.0 Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Communications Session Border Controller Cz8.4 Oracle Communications Session Router Cz8.4 Oracle Communications Subscriber-aware Load Balancer Cz8.3 Oracle Communications Subscriber-aware Load Balancer Cz8.4 Oracle Enterprise Communications Broker 3.2.0 Oracle Enterprise Communications Broker 3.3.0 Oracle Enterprise Communications Broker Pcz3.3 Oracle Jd Edwards Enterpriseone Tools Oracle Primavera Gateway7 Github repositories available

4

CVSSv2

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The...

Lodash Lodash6 Github repositories available

7.5

CVSSv2

A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype....

Lodash Lodash18 Github repositories available

5

CVSSv2

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded....

Axios Axios9 Github repositories available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook